This Privacy Policy describes how PHORA collects, uses, and protects your information.
PHORA, developed and operated by Osmium Infotech ("PHORA," "we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your information when you use the PHORA application and related services.
By using PHORA, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the application.
We collect information that you voluntarily provide when using PHORA:
When you use PHORA's AI prescription reading feature:
PHORA maintains a curated medicine reference knowledge base. When you access general medicine information within the application, this information is retrieved from our reference database and presented to you.
We may collect certain device information including device type, operating system version, and application version for the purpose of improving service quality and troubleshooting.
PHORA requires access to device notifications to send medication reminders. Notification preferences and settings are stored locally on your device.
With your permission, PHORA accesses your device camera when you choose to photograph a prescription or medicine package. When you choose an existing image or document, PHORA accesses only the item you select through the device's system picker, where supported. Selected or captured images are used to provide prescription reading, medicine matching, record storage, and related features. PHORA does not use camera or photo access for advertising.
The following table explains what PHORA accesses, the feature that requires it, whether it is stored or transmitted, who may receive it, and how long it is retained:
| Information or access | Feature and purpose | Storage and transmission | Recipients | Retention |
|---|---|---|---|---|
| Phone number, name, profile details, authentication tokens, and OTP-related data | Account creation, sign-in, account security, and profile management | Account data is transmitted to and stored on our backend systems. Authentication tokens may also be stored securely on the device. | PHORA's authorized systems and personnel; contracted hosting, authentication, and SMS/OTP providers where required | While the account is active and until deletion, subject to limited backup, security, fraud-prevention, and legal retention described in Sections 8 and 9 |
| Camera access and prescription or medicine-package images | Capturing prescriptions, extracting prescription information, scanning medicine packaging, and comparing medicine information | Camera access occurs only when initiated by the user. Captured images may be stored on the device and transmitted over HTTPS/TLS to PHORA's backend, storage, and AI-processing services. | PHORA and contracted AI, cloud-hosting, and storage providers used to deliver the requested feature | Saved images and extracted records are retained while the account is active or until the user deletes them or the account, subject to limited backup and legal retention |
| User-selected photos and documents | Uploading an existing prescription or medical document for reading and record management | Only the item selected by the user is accessed, where supported. It may be uploaded over HTTPS/TLS and stored with the user's account. | PHORA and contracted AI, cloud-hosting, and storage providers used to provide the requested feature | While the record or account remains active, or until deleted, subject to limited backup and legal retention |
| Prescription details, medication information, schedules, medical documents, and AI-extracted text | Prescription reading, medication organization, reminders, medicine matching, and user-requested explanations | Stored on PHORA's backend and, where applicable, locally on the device; relevant content may be transmitted over HTTPS/TLS for AI processing. | PHORA and contracted AI, cloud-hosting, storage, and notification providers, limited to what is necessary for their function | While the account or relevant record remains active, or until deleted, subject to limited backup and legal retention |
| Notification permission, medication reminder settings, and reminder status | Scheduling and delivering medication reminders and enabled caregiver alerts | Reminder settings may be stored locally and on PHORA's backend. Notification content or delivery tokens may be transmitted to a notification provider. | PHORA and contracted notification or messaging providers; connected caregivers only when the user enables sharing | Until the reminder is deleted, sharing is disabled, or the account is deleted, subject to limited backup retention |
| Network status, device type, operating-system version, app version, and technical diagnostics | Connecting to PHORA's services, maintaining compatibility, troubleshooting, security, and preventing misuse | Network status may be checked on-device. Necessary technical data may be transmitted to and retained on PHORA's backend or diagnostic systems. | PHORA and contracted hosting, security, support, or diagnostics providers | Only as long as reasonably necessary for operations, security, troubleshooting, and legal obligations |
| Support-contact name, email address, subject, and message | Responding to questions, support requests, privacy inquiries, and deletion requests | Transmitted through Web3Forms when the website contact form is used and delivered to PHORA; correspondence may be stored in support or email systems. | PHORA, Web3Forms, and relevant email or support-service providers | For as long as reasonably necessary to resolve the request and maintain appropriate business, security, and legal records |
| Microphone or audio | PHORA's described text-to-speech feature produces audio output and does not require microphone access. PHORA does not currently use the microphone to record or collect audio. | Not accessed, stored, or transmitted by the currently described features | None | Not retained |
| Precise or approximate location | PHORA's currently described features do not require device location. | Not accessed, stored, or transmitted by the currently described features | None | Not retained |
PHORA does not intentionally access contacts, SMS messages, call logs, or unrelated files. Permissions that are not required for an active user-facing feature should not be requested. If PHORA introduces a feature that uses microphone, location, or another sensitive permission, this policy and the relevant in-app disclosure will be updated before that access begins, and consent will be requested where required.
We use the information we collect to:
PHORA uses AI vision and language technology to:
To provide these features, prescription images, extracted text, and relevant user prompts may be transmitted to our contracted AI or cloud service providers for processing. We limit this processing to information reasonably necessary to provide the requested feature. AI-extracted information is presented for user verification before being saved, and users can edit or correct it at any time.
We take the security and privacy of your personal and medical information seriously. Because PHORA handles sensitive information, including prescription details, medication information, medical records, and account information, we implement reasonable and appropriate technical and organizational measures designed to protect your data against unauthorized access, alteration, disclosure, loss, or misuse.
Sensitive data is protected using appropriate encryption technologies during transmission and, where applicable, while stored. Communication between the application and our servers is secured using HTTPS/TLS encryption to help protect information transmitted over the internet.
Authentication credentials and security tokens are handled using secure mechanisms, and sensitive authentication information is not intentionally stored in plain text.
We use authentication and token-based access controls to protect user accounts and API access. Access tokens are validated by our backend services, and authorization controls are applied so users can access only the information and services they are authorized to use.
We apply access controls and security measures to protect prescription information, medication details, uploaded medical documents, and other sensitive information. Medical information is not intentionally made publicly accessible.
Where third-party services, including AI or cloud service providers, are used to provide application functionality, information is transmitted through controlled application interfaces, and only information reasonably necessary for the relevant functionality is processed.
Our backend APIs are designed with controls such as authentication, authorization, input validation, access restrictions, and protection against unauthorized requests. We also take reasonable measures to protect our servers, databases, APIs, and stored files against unauthorized access and common security threats.
Where information is stored locally on your device, we use appropriate storage mechanisms where applicable. The security of data on your device also depends on its operating system, security settings, screen lock, and other protections. We recommend keeping your device updated, using a secure screen lock, and not sharing your device or account credentials.
Access to personal and medical information is restricted to authorized users, personnel, and service providers that require access for legitimate application purposes. We take reasonable steps to prevent one user from accessing another user's information without authorization.
We periodically review PHORA's security and may update our software, dependencies, infrastructure, authentication mechanisms, and security controls to address identified risks and improve protection.
Although we implement reasonable and appropriate security measures, no method of electronic transmission, storage, or processing can be guaranteed to be completely secure. We therefore cannot guarantee the absolute security of your information.
If we become aware of a security incident that requires notification under applicable law, we will take appropriate steps to investigate and mitigate the incident and provide legally required notifications.
You are responsible for maintaining the confidentiality of your account credentials and using PHORA on a reasonably secure device. Do not share passwords, OTPs, authentication codes, or other account credentials with anyone. If you believe your account or information has been accessed without authorization, contact us promptly using the details in Section 12.
PHORA allows you to connect with trusted family members or caregivers. Please note:
PHORA may disclose information to service providers that process it on our behalf only as needed to operate the application, including:
These providers may receive account, device, prescription, medication, medical-document, and technical data when necessary for their contracted function. They are authorized to process this information only to provide services to us and are subject to contractual or other applicable data-protection obligations. We do not sell personal or medical information. We may also disclose information when required by law, to protect users or our legal rights, or as part of a business transfer subject to appropriate safeguards.
We retain account, prescription, medication, and related information while your account is active and for as long as reasonably necessary to provide PHORA's services, meet legal obligations, resolve disputes, prevent fraud or abuse, and enforce agreements. Retention periods may vary by data type and purpose. When information is no longer required, we delete or anonymize it, subject to limited backup retention and legal requirements.
You may request deletion of your PHORA account and associated data through the account settings in the application or by emailing phoraofficial2026@gmail.com. We may need to verify that the request comes from the account owner. Deleting the application from your device does not by itself delete your account or server-stored data.
When your verified deletion request is completed:
PHORA is not intended for use by children under the age of 18 without parental or guardian supervision. We do not knowingly collect information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information promptly.
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
If you have questions or concerns about this Privacy Policy or our data practices, please contact us: